From a440a8d7ddf92b5e77ce608309134a36f744bc2b Mon Sep 17 00:00:00 2001
From: prssanna <prssud@gmail.com>
Date: Thu, 21 Jan 2021 11:27:06 +0530
Subject: [PATCH] fix: escape kanban name in data attribute

---
 frappe/public/js/frappe/views/kanban/kanban_board.js |  2 +-
 .../public/js/frappe/views/kanban/kanban_card.html   | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/frappe/public/js/frappe/views/kanban/kanban_board.js b/frappe/public/js/frappe/views/kanban/kanban_board.js
index a6187459c0..c23993f3f2 100644
--- a/frappe/public/js/frappe/views/kanban/kanban_board.js
+++ b/frappe/public/js/frappe/views/kanban/kanban_board.js
@@ -166,7 +166,7 @@ frappe.provide("frappe.views");
 						var col_name = $(this).data().columnValue;
 						order[col_name] = [];
 						$(this).find('.kanban-card-wrapper').each(function() {
-							var card_name = $(this).data().name;
+							var card_name = unescape($(this).data().name);
 							order[col_name].push(card_name);
 						});
 					});
diff --git a/frappe/public/js/frappe/views/kanban/kanban_card.html b/frappe/public/js/frappe/views/kanban/kanban_card.html
index 67bc74c87c..108dadce8c 100644
--- a/frappe/public/js/frappe/views/kanban/kanban_card.html
+++ b/frappe/public/js/frappe/views/kanban/kanban_card.html
@@ -1,11 +1,11 @@
-<div class="kanban-card-wrapper {{ disable_click }}" data-name="{{name}}">
+<div class="kanban-card-wrapper {{ disable_click }}" data-name="{{escape(name)}}">
 	<a class="kanban-card-redirect" href="#">
 		<div class="kanban-card content">
-            <div class="kanban-title-area">
-    			<div class="kanban-card-title ellipsis" title="{{title}}">
-    				{{ title }}
-    			</div>
-            </div>
+			<div class="kanban-title-area">
+				<div class="kanban-card-title ellipsis" title="{{title}}">
+					{{ title }}
+				</div>
+			</div>
 			<div class="kanban-card-meta">
 			</div>
 		</div>